public list of suspect domains for ML training
https://github.com/csirtgadgets/tf-domains-example
https://csirtgadgets.com/commits/2018/6/9/phishing-predictions-with-deep-learning-and-tensorflow
https://csirtgadgets.com/?tag=machine-learning
https://malwaredomains.com
http://s3-us-west-1.amazonaws.com/umbrella-static/index.html
http://openphish.com
PhishingCorpus - mbox files from over ten years of phishing